Skip to main content

NOZZLE NINJA

First Layer AI Error Detection for OctoPrint & Klipper Now Available!

OBICO_NOZZLE_NINJA_COMPATIBLE_BADGE

24 posts tagged with "The Spaghetti Detective Updates"

View All Tags

I have regained my confidence that The Spaghetti Detective app is on pretty solid ground when it comes to security. I take full responsibility for the blunder I made in the process of developing and deploying the auto-discovery feature. Meanwhile, we don't want to have the auto-discovery function disabled forever. It would be the easiest way moving forward, but also the laziest. We know auto-discovery has made it extremely easy for new users to link their printers to The Spaghetti Detective and everyone loved it! We still want to give them a way to do it, and do it securely.

And we found a way!

The original auto-discovery design and implementation

The Spaghetti Detective had a serious security incident on August 19th. That incident was caused by a mistake I made in the function called "auto-discovery".

This post is to provide an update on what we have done after the incident.

What we did on the day of the incident:

  • Immediately disabled auto-discovery once we found out the vulnerability, about 4.5 hours after it happened.
  • Identified and deactivated the 73 printers that were exposed to this vulnerability during those 4.5 hours.
  • Sent an email to all The Spaghetti Detective users to disclose this incident.
  • Offered all Pro subscribers the option to cancel the subscription and receive a full refund.

I screwed up. It was the first security breach The Spaghetti Detective has had in 2 years of her existence. But it was an embarrassing one that I can't forgive myself for.

What happened?

I made a stupid mistake last night when I re-configured TSD cloud to make it more efficient and run faster. My mistake created a security vulnerability for about 8 hours. The users who happened to be linking a printer at that time were able to see each other's printer through auto-discovery, and were able to link to them too! We were notified of a case in which a user started a print on someone else's printer.

73 users got impacted as a result. It's not a huge number. There are bugs that impact a lot more users. But the consequence is very severe. Nobody wants his/her own printers being linked to and controlled by another account.

I created The Spaghetti Detective to let all 3D printing hobbyists have a way to safely monitor their printers from everywhere. And this is one of the worst mistakes I can make. My sincere apologies to our community for this horrible mistake.

The Detective has done a really good job at spotting, well, spaghetti for all of us! Kudos to her! However, there is only 1 problem: her hearing is no good. This small birth defect means:

  • She can't detect anything that she can't see, such as the clicking sound when a step motor stalls.
  • She can't detect anything that she can't see clearly. This means she usually needs to wait at least a few minutes for the spaghetti monster to fully reveal itself before she can catch it.

This is why we came up with a bold idea - if we fix The Detective's hearing, she will be able to catch the criminals earlier, or catch the ones she would otherwise miss!

TSD has no affiliation with the linked sites or organizations mentioned in this article and is not compensated in any form for linking to them.

Mothers are, ultimately, the best “makers” on this planet. I write this from the vantage point of a man that has a great and loving mother and a pregnant wife who is the mother to my 2 boys with a 3rd on the way. As I see multiple frustrated Reddit posts about unlevel beds, extrusion issues, and prints going otherwise awry; I think about how those inconveniences trifle in comparison to swollen feet, morning sickness, and 9 months of utter exhaustion.

So, what better way to honor these ultimate makers than with something heartfelt and made by us? There have been many posts over the last 10 years or so about the “Top 10 3D Printed Gifts for Mother’s Day” including this one from All3DP. At the core though, all of those articles are just inspiration for what you can do for your mom.

The ideas below are meant to inspire and spark a memory of a special connection with your mom. For example, my mom is really into beekeeping. I am planning to make something like this bee feeder and this honeycomb picture frame (with family pictures included, of course).

Hopefully, you can find something that fits the bill on Thingiverse or MyMiniFactory but otherwise take a look at making your own creation with Tinkercad. They are genuinely easy to use, and you can make your mom something that nobody else in the world has!

The EZPi Pro V2

TH3D Studios's EZPi Pro V2 now comes with The Spaghetti Detective preinstalled, and is available as a secure plug-and-play octoprint setup if you're looking for one. It's been a pretty cool road getting here, though, and it started back in...

Wait, hold on, disclosures

The Spaghetti Detective and TH3D have no monetary relationship with each other. We and they both sponsor Octoprint, and there's a Teams chat where we ask each other questions we might have about each other's products and services, but no money changes hands between us and no links attached to this article are affiliate links.

I also own this one of their shirts in purple, but can you blame me?

Now on with the story.

As I was saying, it started back in

January of this year. Tim Hoogland, owner of TH3D, reached out that one of customers was trying to set up The Spaghetti Detective on an ezpi using their EZCam, it wasn't working for that customer, and he hoped to furnish whatever information we needed to troubleshoot and make sure our software worked with TH3D's camera.

Wade Norris of TSD suggested that, since TSD isn't in hardware and TH3D is, he "realize[d] this might be a really great collaboration opportunity." Tim agreed, saying "I think we can help each other out. I am working on a new image for our Pi kits, and one thing I could do is bundling your plugin in the Pi," asking if there were any OS-level customizations that would improve the TSD experience on EZPis, and we were off to the proverbial races.

But that's not really the beginning

An early perfboard EZABL from May 2017

For the past several weeks, since we announced the giveaway, The Spaghetti Detective's community has responded to the challenge with enthusiasm and creativity. More people than we ever expected printed Wekster's awesome model and tagged us and Wekster, and because we have such an involved, enthusiastic community, we have given out thousands of free Detective Hours. We love all of the prints, but after the jump are a few of my personal favorites, along with the winner announcement and winner selection process.

The army of failed prints

There's a game I like called Dark Souls, made by From Software. It's an action RPG known for its difficulty, and it has spawned its own subgenre of games, though most imitators miss the most important part about Dark Souls: Everything that goes wrong, even if it's not your fault, went wrong for a reason you can learn from and avoid the next time. Every failure gets you better at the game. 3D printing is like that. As you see above, in the prints since my successful first print, I've had a lot of print failures. Let's go into why they failed, how I know how they failed, and how I fixed them.

3/4 profile
Front
Look at her glowy eyes!

A lot has happened since my last post. To start, on Sunday, March 7, we finally passed the thirty million Detective Hours milestone. The Detective has kept vigilant watch over your prints for almost 3,500 years of time. While she was busy watching your prints so that you don't have to, this is:

What you've been up to

You guys have been sharing a series of beautiful prints of The Detective on Facebook, Twitter, and Instagram, and we're floored by the response. Every day, there are new shares and we've got more Detective Hours to give away. Please keep it up - the usernames to tag are below, and we'll give you 200 free, never-expiring Detective Hours for every print you share where you tag Wekster and us.

What I've been up to

Five days ago, Wekster contacted me to let me know that he had split the bust model for full multicolor printing. Below, I've included zips of the STLs for the multicolor base and the new, fully multicolor detective.

Since then, I've been trying to print her. This is how that went:

The Spaghetti Detective came out of beta about 1 year ago. Since then, The Detective has watched more than 19 million print hours for the 3D printing hobbyists. That is on average 49,625 hours a day!

And sometimes next week, we will cross the mark of 20 million watched print hours.

Those who joined TSD family early enough would probably remember we had a celebration (socially distanced and perfectly safe😉 ) when we crossed 10 million hours back in April. We will do a similar one this time too. This means the chance to get 50% discount off Pro account but you need to work for it. We will make the rules simpler than last time: